PT-2025-43904 · Hasleo · Hasleo Backup Suite

Lakshay12311 · Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-12247

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hasleo Backup Suite versions prior to 5.3

Description A weakness exists in Hasleo Backup Suite up to version 5.2, specifically within the HasleoImageMountService/HasleoBackupSuiteService component. This issue stems from an unquoted search path, allowing for potential local exploitation. The exploitability is considered difficult, and the exploit has been publicly released. The issue impacts an unknown function within the component.

Recommendations Upgrade the affected component to a version prior to 5.3.

Exploit

Fix

Untrusted Search Path

Weakness Enumeration

CWE-428

CWE-426

Related Identifiers

CVE-2025-12247

Affected Products

Hasleo Backup Suite

References · 10

• 🔥 https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hasleo%20Backup%20Suite%20ImageMountService.md · Exploit
• 🔥 https://github.com/lakshayyverma/CVE-Discovery/blob/main/Halseo%20Backupservice.md · Exploit
• https://easyuefi.com/backup-software/downloads/Hasleo_Backup_Suite_Free.exe · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-12247 · Security Note
• https://vuldb.com/?submit.672548 · Note
• https://vuldb.com/?id.329918 · Note
• https://vuldb.com/?submit.672549 · Note
• https://t.me/CVEtracker/35807 · Telegram Post
• https://vuldb.com/?ctiid.329918 · Note
• https://t.me/cveNotify/140413 · Telegram Post